News for hackers. Stuff that matters.

A comment on Windows 7 patch for Meltdown enabled arbitrary reads and writes in kernel memory. Parent comment

Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by mgerdts on Wednesday March 28, 2018 @01:22AM (#16695529)
I seem to be unable to find a patch that will make it so that this doesn't run. Windows Update says that I have all required patches. I first tried KB4088875. That didn't cause this program to fail. Then I tried "2018-03 Preview of Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4088881)", which was only a recommended update. That didn't help either.
[ Parent | on HN ]
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by mysterypie on Wednesday March 28, 2018 @01:58AM (#16695700)
Same for me. I tested a Windows 7 x64 system which has all security patches, but caf's "really simple test" above still runs, which seems to indicate that the bug still exists. Same as you, I applied KB4088881, which was the only pending update, but it made no difference.

Also, I tried the command from the orginal article:

pcileech.exe dump -out memorydump.raw -device totalmeltdown -v -force

This creates 5GB file which does look like a raw memory dump. I'm not sure how to interpret this; I don't know what the behavior should be with or without the bug.

[ Parent | on HN ]
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by mgerdts on Thursday April 05, 2018 @11:33PM (#16770700)
In the off chance that anyone stumbles across this in the future, KB100480 fixes this.

https://portal.msrc.microsoft.com/en-us/security-guidance/ad...

CVSS 3.0 base score of 7.8.

[ Parent | on HN ]
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by BrianG61UK on Friday March 30, 2018 @12:48PM (#16717685)
I finally found the fix. It's KB4100480. It makes the little test crash as it should.
[ Parent | on HN ]
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by BrianG61UK on Thursday March 29, 2018 @08:48PM (#16712671)
So there is no patch that fixes it?
[ Parent | on HN ]
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by BrianG61UK on Wednesday March 28, 2018 @11:50PM (#16704384)
Same here.

I'm worried.

[ Parent | on HN ]